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[-2. SMI 

41 ^ 3J ^7fl7l <y-Jr3j- (a) *H^HH, £<*r(p, q, g)(<^7l 

^1, pfe- k» ^ €• 4^r°lJI, q^r p-1* M-¥^ €■ ^<>1H, g ^ 

$1^7} q^l 4M§^)S ^7fl?l Sf^^l^^i -id^SRr #7fl; (b) 

o:^;- {0,1}*)= ^Bfl^cxj ^ 7 fl*Hr ^711; (c) ^Jtl^, #7l ^-7l]7) 4^ 

c]Ei(p, q, g)^- ti>^C.^ * eZ «^. nKtj^ aJbA^-o} ^1^71^ iL^JL x ^ z \ 

I" W*Kr ^7fl7l X* ^fl7l 3}-^DlE^ ^7fl7l(p, q, g ^ X)# ^ 

7fl*Kr ^7^1; (d) ^l^MH, >y-7l ^€ ^"7fl7l X# #7] ^ m -g- 

«H #3l§-( a , ^^Kr ^1; (e) -r^l^H , #7l ^.S^Bl 

, £H1 tfl*H -R-iL^^ 3^«Hr #31; (f) ^^HH, -fh Jl^ °1 ^-71 

^4-^ 7>^oll ^ <£Bj*l Tfl^ 

£ 3 
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TflXV^ ^3Xj-^u> 7 >^ofl 7l^>^- ^ 7>^tb ^7fl 71 oJ-^S}- « o ^{PR0VABLY 

SECURE PUBLIC KEY ENCRYPTION SCHEME BASED ON COMPUTATIONAL DIFFIE-HELTMiW ASSUMPTION 

7fl7) <£JlS}- « 0 >^# ^*Kr Hi 3^tb Al^^^ 1:4=- 

£ 3£- 2<^1] S.^m ^-s-^ ^-^Hl ^Htb ^ 7>^t!: ^fl 

71 ^-1^- wj-^^l ^*Kfr 

10, 100 : #*1 20, 200 : #*1 

30, 300 : ^7fl7l cl^jSej 400 : ^ 

,|-^51 ^-^] 

[^ol 4f*}±r ^ =L £r<^ ^Efl7l#] 

<7> ^- 7 fl7l aJ-jLS}- « 0 V^ofl ^O.S, iLCf ^-Afl^-Tfl^- ^-§-^1 oj-^p # 

^341 "o^l %°}^. 

<8> ^^.^^ t±<$& ^$.7} ^E^^ Jg-is}d) JE^-SlJl 

sa^. *^>7> -^oim- ^> ^ ^ ai>,^ ^ ^^tb *iH*m ^ 
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t£-s}JLX\ fj- nfl, -$HM ^^l*} olS]^ *)] 3^ 7 ]. o) :fl-§^ nflAl^ofl tfl 

<9> ^1, ^ 7 fl7] 7l^-8r ^JlSj-* ^ ^ ^fl ?1 «4 U]H?)^r ^ 

^7fl7l# ^7fl?l tqsfSeH ^7flSf^ ol A>^>ofl7fl Wl^^o] iL^S}^ x^X\^ l£vfl 

3^ 74-§-*Kr ^7fl€ ^7fl7ll- ol-g-*M *1H*1» *r 5^. ^ 

7H71S ^JlS^ oHl cfl-§-^ 71, ^ til^7Hl Sl^flA-1^ ^ 0I7I nfl 
^-cfl ^lAl^l^ til^oj Ji^l}. 

<10> £ l-§- ^l&ajSl ^-7fl7l <$3L <£jl^^ A}-g-^Kr 7l <£JL 

$\ ^ ^5LsL*\, <£4l*H^ #*1(10), ^r*\x}%2) ^3L5\- #*1(20) ^ ^7fl 

71 ^^)Sel(30)# JL^Vrl-. ^aI^o] ^-^1(20)^ 4^3*1 ^ 

^7^}9\- 7 flol7l(afe Wm7l)l- ^71171^ 2-€" <g ^ 9l?Er ^7^] t\ 

3}£5K30)«11 ^lSJ-al, 7fl^l7l^ ^7.>#^1 ^-JlS}- #*1(20W ^^-cf. 
<11> ^Al^o^ ^-SSJ- ^1(10)^ «y-^3l-^>ZL7> 3g °- DllAl^ll- ^-7fl 71 

(30 HI Ji€€ *7fl 7l» #3:a*t!- ^ ^fl^(50)* -f- 

«H ^*Ht^1 #*1(20)3. ^«VtK ^7\^9\ 4^2}- #*1(20)tt 7.>A]o] ^ 

7fl 71 (30)^1 -^7fl^t ^7fl7lSf ^T^-^Ei #51 -g-^- 

3-3l3^M ^*HH -MS] ^ p!1a1^1# ^^cl-. 
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<12> ^x}^°l ^-^1 (10)5+ ^a]*}^ ^SLS\- #*1 (20)*} o HH 

£-o] nfl, ^Jl^-^r <^^°1 2L#$*] ^S-(50)# ^V7fl Sj^S. ^£ 

^2H1 -g-°m ^.s.* #°J*H *fl^-*Rr ^^H- ~ 

<13> ^ ^-g-Sj^ #%*fl^, ^3*Rr ^Jl^I rfl*V ^iLMl**^, 

^J: Al^^^ o>;£^ (semantic security)* iL^V^o) tr*}. 

<14> HeiM- cfl^S] ^-7fl7l <3-S tfl^aj 7Wi $171 nfl-g-efl, ofl $ 

#<H, 27fl ^Jl-g-^ ^ 27fl ^^-^ ^ ^Cf^ ^ afl£-°fl, ^3*f7> ^ ^3 # 

3L£-(cH tfltr ^iL(7| ^ ^S^l #-§-*Hr ^71 ^^(c)^ tf 

s^l^ <a-s&(c)2f &&°] 91^ ^X-g-Cc')*^! tfltr ^-l^t iL^*}^ ^l^^l^ 
^^-^ ^-31^- (Adaptive Chosen Cipher text Attack : °l^r ACCA^JL ^) 

- v^o\^ ^j^l^cf. o] nfl ^-3*Kr tir(c)t 33 ^31 3^ ^ &cf. £ ACCA^l tfl 

<is> . ACCA^ ^7l|?l •g-jMilN tfl^ 7>«B^ ^ ^xf ufl-f #^*r 

^Jofl ^ S ^7^ ^S^M" 3^1^ ^TflSl^f ^7fl 71 AliEfl^-o] acca^II 

tr3ltr7Hl -g^ll^l 2:^ol nj-^ol^] Jl oj^. ^ojcf. S}*!^ ACCAoll ^£31 
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<ie> ACCA^l ^>^^r ^fl^l ^*&^9] 1991V1 e}S^(Rackof f )s}- 

(Simmon) -f-ol a]cf|^ <^*H (non-interact ive zero knowledge proof)^- <>]•%■ 

<i?> o]^ 1993^ *§eMl(Bellare)£}- S.7HM (R 0 gaway)7> o]>£3<£l ^fl^^s. 7 }^\ 
Jl ^ S^c]^ ig-) rsa 7>^-§- 7] a}AS. ^>J1 ^-g-^olJI ACCA<H1 

tfltt <?M^ 0 1 7}^ ^7fl7] <a-sSf 71^-8: *\Mf>}<%rl. 

<is> zls]ji 1999^ ^lA>7l(Fujisaki)Sr _£7K££(0kamoto)^ €^ *>cfl 
^sj-IS 1 ?]: 7]-^ (decisional Di f f ie-Hel lman assumption)^ 7ltfV£}-:n. $XJL 
ACCA<^1 tfl^ <?>3l^ol ^ 7}^ nfl-?- JL#^^1 ^7fl7l ^12j- 7^* ^l^V^^-. ^ 
^3 Cl3)-^n> yHHft ^-^7.1-71- ^ 7fl^ ^^S. (S'-S",^^ ( < g',^,g' y ) {*\ 7 ]*\ R 
\+^r^H S*"^ ^o]^ ^4J1 7>^W. St-V ^ ^ ^ ^ 

-"'"■^g. 7^1^^)» ^SRr ^-Irol ^a]^- ^ ^.£5. 7>*<HtK - 

<19> 2000^ i 6 J-*H^(Pointcheval)^r i?}£S ^7fl7l <y-jLs}- 7l^S] 7]^ 

(computational Diff ie-Hel lman assumption)^- 7l«>^.S. 7>}5L, ^ iL2}# S-^SMH 
ACCA^l tfl«; <££^o] ^-7fl7l 71 ^1<?>^^^. Tfl^ t^-^ 

7H3 ^^7.H]7fl §^ 
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K aJ-o} s x 9\. b"4\ ^ #o] ^o]^ nfl, ^7\7\ ^# TflA]-^- ^-l-o] -Al^- - oj 
■i- ^^Hr 7>3°l c h ZL^M- a<8-4fl^ ^7fl7l oJ-SlSj- 7l^S] ^ 7>*1 

^Lfo) DflAl*l# n #Jl-£-31 *M7> 45}DlEi2] 3tifl 

<20> ACCA°1] <?l*it> ^"7fl^l <3-3LS}- 7l*?H*| ^^O.S ^fl^^l-Jl ^ -^^^>7> 

^ <?1#^* *)l^*Rr 3J°1^-. # 

-g-^H nfl ^ #Jl3}-^ ^S^l <?1^^- iL^*))^ 

^-fr -S-^fl C JS2}- ^^-4 

^Al^V ^15} ol oj-^ofl ol^ ^ ^JlS^I *i 

<21> ACCAofl *7fl 71 oJ-SSl- 7l^«) ^^^<?1 ^HflS} ^"71] 71 

71^4 WliE^- nfl ©J-iSj-S^- 4^^- «1^^>M- ^S^Hr ^^1^1 ^S^-Sl -B-JL^ S?- 
' ' <?! ^ iE^r -^-Jl^ ^^V» c-l S^>J1 5*4. 

<22> ^L^°.S., ACCAofl Cfltb ^ ^-7fl7l oJ-SSl- 7l^^r *H^Kr ^Jo] 

^-S-^Cl-. 

[^ol ol^jl^ ^ 7l#^ 2)-^] 
<23> ^ £ + ^ ^ n 7 )^^°) ^ll- «fl^^>Jl^ <>HM ^Ai, ^ 

^-S- ^Sj-^ 7^^.1=1- ^ 7>^^1 7^1^ rl5X)-^o> 7 >^ofl 7l ti>5> Jl ^Efl 

17-8 



1020000060854 2000/12/1 

7l^iLc]- ^J-^-S] zJo] 7 > #0.^ Q^SLtym s.^ §H1^| ACCA°fl tfltb ##^<>1 ^ 
^ 7HMlV ^7fl7l ^5}- 71^^- *H^*Rr 3-8: H ^il-sL tlrcf. 
<24>. S-^-t- ^*>7l ^tb ACCA^l ^"71171 ^Jisl- ^ 

(a) ^Hd^HM, €^(p, q, g)(^7H, p ^ ^o] s dti^olji, q 

p-1^: ^¥^r €- i^n}, S tt ^<*M ^^7> q<?] ^7fl7l 

sJ-efDlEis^i *i^*Rr #711; (b) ^Hl^H, 3-§-3 #3l^- *]^2H1 3l*H 

^ 4 2 n^^r G Z 'r~* ^-^l ^7fl*Rr #711; (c) ^4l«HM, ^-71 ^ 

€ ^7fl7l 4^nlEi( p , q, g)# «>^-o.s. xGZ 9 » #^§Rr x» -Sd^M «1 ?1 5*1 IjL 
X ''-K% #4^}^ ^7fl7l XI" 7^9\ ^ 7 )]7l Sj-Sl-PlE-la}- ^7fl7l(p, q, 

g ^ X)# ^7fl^ #741; (d) Mt^l^, ^"71 ^-71171 X# ^l-§-*H ^71 

m^: ^sH^M QzL^i a , B ^^Rr #741; (e) ^rMd^H*!, ^7} ^^o_S.^- 
*\ °J-S^r( a , tfH cfl^ -R-SL^ 3^Hr #7fl ; (f) ^d^HH , -H-M^l 

^"71 °J-Jl^-( a , ^-71 ul^7l x» «^l-g-§H ^-£--2.3- ^Jr-g).^ #7111- 

<25> o^} ^- #^04 ^-ol #*fl*] ^o]^. 

<26> £ 2^ £ ^"^^1 ^-7fl7l <y-iL3}- 71^31 7fl^^I ^ ^£^1, ^4!*H§? 

^ ^-Jl^. ^1(100)31- ^^5] ^-Jls}- ^1(200) ^ ^711 71 ^3]£eK300)# 
A. ^1(200)^ ^^(400) ^ ^-JLsHf-(450)l i^-W. 
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< 27 > ^Hi*H^ 431^(450)^ €■ P, q, 3? g * i^Sfe ^7fl 

71 4^1 ^th 4«4(450)^ am^ll- i^Ml ^j^Sl-al, o] & 

^-7flfl ^a]£sK300H ^H^U, «1^7l^ oj^^ ^oii £^4. ^a]4^4 4 
:§l3HH450)*IM ^€ -^H?1tt S^HtS) #£5)- #*1<100)4M ^^H*lf- #31 

<28> ^Al^cq oj-jr^. ^1(100)^ ^ r-i- #^*H ^£ i^l^ll- #£5^H 

f-A] ^fl^(500)# ^aj^o.^ ^^4. 

<29> ^ A] 7.^0} o]- 34^(400)^ £ l«fl oflA]^ ^efl 7l£<J] ^7fl7l 4 i?H 

W ^ o(| Alx | o]^ ^ApjL^CLsL A>-g-^4. ^flA], o]^ ^Apf(400)^r 

^14^3 oj-^^j. ^Kioos-^-E] *d^€ #:£3J-€ ^£ °fM*l3 <y-s^-^ 4^44 

(450HH 4S2)-S>7l *H «1^7ll- ol-g-SM ^J^l -H-J-^ll- ^WJL, 
#3L£°1 ^-f<HRV, 4^^(450)^ Aj--^ 4s5|-l- ^tKE^ 

<30> 0]*}, £ n ir$o) ^ 7flf | oj-jr^ £ £ 34 ^ 2 

*M £4 $41.) 7jol4. 

^ ^7fl7] 4^1^ #7fl(500WH, =r4l^ 4iL5pjL(450)^ ^7] 4 

^, f^*] ^ i^r P (<^H p 4 Zjojfe k )4, p-1^ 4^ f^S] e £^ 
q usU 3^7} q^l ^S 2 ^ g# ^7fl7l 4eH 3 49 

^€°l2Hr 3£ g°, g 1 , g 2 , g<r lo l ^ X\3. 4€- ^7> S)7pKr 

$\ 4 D 1W. 
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<32> n 4^- *B3^ ^ #7fl(510HH, ^s}-^(450)^ ^ 7fl£| ^(^3 

£-4#) H(^H, H <o. i>*- ^)^-G(^7H, G: ^~ 4d^!*M ^71)^4. 

<33> f^r^r ^^S) z}o]o] cflolEil- ^^o.S «H 3*fl*l ^ol^ ^ 

3#(<« 160 «lJ=)-i- 14]^ ^^^o] t^LAi ^ 1:7]-^^ 7l-^o. 

4sH14^H, VH^-g- IMM^^l $\Z}cq AV-g-Sjn}, MD5, SHA~1 

<34> Zl 4-§- ^"71171 ^ #7fl(520HH ( ^5J.«.(450)^ ^13]^ ^-7fl7l 4^*13 (p, 

q, g)» - reEZ ? # x» ^, x^r al^^l^ ji^-ji, *}7} ^ 

^ 14 ^-ol^^ n>^^ ^ 7 ]} f ] x # Tfl^sM ^7fl7l 4eft»)lB^ ^7fl7l(p, q, 
g ^ X)# *7fl7l 4^51(300)4) TflAl^Cf. 
<35> 1] 

^ - s x 

<36> ZL Cf^- oj-jr^. ^(530)^^, (100)fe ACCA°H tfl*V ^-^ofl 

#3l a]^^^ £<i ^ ^Tfl ^ ^^.(authentication code)^ ^ihg; ^ *fl^ 
H, *H r 4 TflAV^ c)3l-f^ 7>^fil *>#^ i^Rr n# 

G, ^-J>2Hf(450HH ^7fl7l X# o]-g-*H ^wKa*} ^ol 

*°(#, *o-*-*,=*oj4)ol m o] <£jrg- (ff ? 0)^ t}7) 24 ^-o} 741^4. 

<37> 2] 
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^ ##3: ^ flfe w>2f ^-o], ^ ±^ Gt ^-g-^O 

#*Hr ^7fl7l #3L5}- 7l^-g; ^ <&5L, SE*V *fl*l*l m°H il^rf 

"a^H ACCA°fl cfl^ ^V^i *fl^ ^ &th oj^Tfl a , 0)£r *fl 

^(500)# -S-sH ^^l7}#o.5. ^sltf. 
<39> zl cf^- <y.jr° o.j-^ ^ #3l(540H*l, ^l*}^ 3^(400)^ ^ 

*V*S] 100)5L^f Bl £)2} -frJL^* 3#*}7l $1*}^, 

^ 47} ^SRr *1« ^r^tl. 
<40> 3] 

<41> 3<M, tTT ^Hl^MH oj-jrJg. <£jr,g-(tf , £) 0.3.^1 Tlltf 

<42> 4 ] 

<43> oi^ 3A} J f(400H*|^ ^ t*H4 47> SHr^ *-*l*>^ <£- 

JLSf ^(lOOHH £)°1 -fl-SL^l ^JOS. ^*>J1, ^JL-g-^r 

a] 51 71 'Hl^S(reject)'2l-^ <&3l^ #*1(100H 

tfl*H *fl^* H-^-W-. 
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<44> nam-, 43 ^^o] ^-o]s)^ ^3L5\- #31(550)3. ^ , 42^- 

<45> ^^H^b ^ -£.ej-#(*fl4=l^) Gl- ^ (m " r) oii ^^-f^^l ^3 ^n) ^ 

sj- 7l^# ^ StV n|M*l m ofl $0] ^E*y c^*v ^ €fl4l^ Hi 

aJ-g-sH °1» g°fl ^^fA^^I ^Is^ ^S^-sl ACCA^l 

^ *\]^ ^ 5a^. SEth ^<H1 n^e* jtov 3^21-dIeI k^l 2«H1 «fl^> 
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^zh ^. 7 fl7i oj.^^. ig-^ofl sa<H^, 

(a) #7l ^3L§\- #*HH, ^(p, q, g)M7H, p ^ zjo] k # £i=. ^ 
£^°lul, p-l-£- i-mr ^gr^l ^r<>H, ^MS5" 3)^7} q ol ^ 

(b) #7l ^3L3\- #*HH, ^"S-^ ^-g" ^I^^H tflSj-oJ ^^-i- 1^-5^ 
*)1 1 ^ H(<^7H, » <o.i>*-*.)sJ_ ^JXJ.^ t^3)-^nV 7^0} o>^^^- JiL#*Hr 

(C) #71 #*HH, #71 ^7fl7l irJ-El-nlEKp, q, g)» W>^-0.5. 

lGZ «f #<^Rr X« ^^^H ti l ^ 71 S.A-1 a.^§>31 l*=g'1& ^-71171 X 

« >^*H AA^ ^A^&C ^7B7l(p, q, g ^ X)» ^7flfjRr #711; 

(d) #71 oj.;£3J. #*HH, #71 #*H*1 49#3 ^-7fl7l x« *>l-g-*H # 
71 m-g- <a-^^ <&3L%r(a , $)% ^*Kr #7fl; 

(e) #71 4^2}- #*1<M, #71 #:£SJ- #^l^Bl <&2L&(a, £H tfl 
*H -fr3i#-a- 3#*Rr #711; 

(f) #71 #*HH, -B-Jl^oI ^-71 oJ-^ (a> ti 1^7) x 
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2] 

all 1 &<>H, ^"71 oj.^ #7j|(dHM, A cM <£jL^(ff , iff - 

[CeuP)-Cg iS ^ ) .GC^* c - ,w )©C»ll'-»]^: °l-g-*H -S^^M. 

3] 
4] 
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IS. 1] 



30 



10 



50 



20 



[5L 2] 




— P — 
150 



«1 «7l 
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[51 3] 



( *1 ^ ) 
1^ 



— 500 



sH^^-a^ —5io 



•520 
530 



-friL^ —540 



#£€-J|-;SJ|- —550 



do 
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